VYPR
← All advisories
Medium severity5.3NVD Advisory· Published May 7, 2026· Updated May 13, 2026

CVE-2026-39819

CVE-2026-39819

Description

The "go bug" command writes to two files with predictable names in the system temporary directory (for example, "/tmp"). An attacker with access to the temporary directory can create a symlink in one of these names, causing "go bug" to overwrite the target of the symlink.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3410

Patches

Vulnerability mechanics

References

4

News mentions

1
CVE-2026-39819 · Medium · VYPR